[Freeipa-users] Having Issues with Dogtag After Updating IPA and Rebooting

[Endi Sukma Dewata]

On 3/23/2015 12:10 PM, Michael Pawlak wrote:
> Rob,
>
> Thanks. Any additional eyes would be greatly apprecated.
>
> *Michael Pawlak*
> Web Systems Administrator | Colovore LLC
> E: mike at colovore.com <mailto:mike at colovore.com>
> C: 408.316.2154
> <http://www.colovore.com>
>
> On Mon, Mar 23, 2015 at 6:24 AM, Rob Crittenden <rcritten at redhat.com
> <mailto:rcritten at redhat.com>> wrote:
>
>     Martin Kosek wrote:
>      > This may mean that Dogtag is not up. Can you please check with
>     "ipactl status"
>      > that it (pki-ca) is up and running and that there are no related
>     SELinux AVCs?
>      >
>
>     The problem seems to be java-related:
>
>     The self test plugin named selftests.container.logger.class contains a
>     value com.netscape.cms.logging.RollingLogFile which is invalid.
>
>     I've seen cases where selftest failures don't cause the CA to not start
>     up but does prevent it from actually operating.
>
>     The bottom line of the errors you are seeing is that the CA is not
>     completely running. I've cc'd a couple of dogtag developers to see if
>     they can help with the Java exception.
>
>     rob
>
>      > On 03/23/2015 04:52 AM, Michael Pawlak wrote:
>      >>> ----- /var/log/pki-ca/debug -----
>      >>>
>      >>> [22/Mar/2015:06:45:10][main]: CMSEngine: done init id=profile
>      >>> [22/Mar/2015:06:45:10][main]: CMSEngine: initialized profile
>      >>> [22/Mar/2015:06:45:10][main]: CMSEngine: initSubsystem id=selftests
>      >>> [22/Mar/2015:06:45:10][main]: CMSEngine: ready to init id=selftests
>      >>> [22/Mar/2015:06:45:10][main]: SelfTestSubsystem::init():
>     ENTERING . . .
>      >>> [22/Mar/2015:06:45:10][main]: SelfTestSubsystem::init():
>     loading self
>      >>> test logger parameters
>      >>> [22/Mar/2015:06:45:10][main]: CMS:Caught EBaseException
>      >>> The self test plugin named selftests.container.logger.class
>     contains a
>      >>> value com.netscape.cms.logging.RollingLogFile which is invalid.
>      >>>     at
>      >>>
>     com.netscape.cmscore.selftests.SelfTestSubsystem.init(SelfTestSubsystem.java:1422)
>      >>>     at
>      >>>

Hi,

Unfortunately the code doesn't log the exact cause of the problem. I 
need some additional info:

1. Which platform are you using?
2. What are the versions of the pki-* packages before and after upgrade?
3. Please provide the /etc/pki-ca/CS.cfg and /var/log/pki-ca/transactions.

Thanks.

-- 
Endi S. Dewata